53753e2edd8a350fd26b4334e18904bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53753e2edd8a350fd26b4334e18904bc
Size

209KB
MD5

53753e2edd8a350fd26b4334e18904bc
SHA1

cf10a433f34c3e2a3b01ef0704ed758cced51a82
SHA256

6f4ddbe56ad8cd49a895215d642ec23e05396554c7abb4e35a66bc41f7c95de8
SHA512

87bb87a333b70f756e1b7dea795b7fe2fbb37d802c8e504ce6ef0873cc65acd741b22298e122475f46077b03d48271cdce3b36a43da43fb3acfbd656a310aad7
SSDEEP

6144:FlsSFhzA5lCY4fuc6kzl0RnRdmGxz3Sx2vnNg9a67o:8Uh8r3/cB0gG1S0vj68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53753e2edd8a350fd26b4334e18904bc

Files

53753e2edd8a350fd26b4334e18904bc
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE